GDPR Compliance

Dear Support,

I am currently auditing my site and checking 3rd party compliance to the new European General Data Protection Regulation (GDPR) coming into effect in May 2018.

Since I am using your plugin, I have a couple of questions regarding this topic:

– Is Reveal IDs setting cookies with personal information from visitors (like IP-address)?
– Is Reveal IDs collecting, storing and/or sending personal information from visitors (IP-address, etc.) locally and/or externally?

In case that you are storing/sending and/or processing visitors’ information:

– Are the IP addresses only stored anonymously, i.e. without the last octet?
– What are you doing with the stored information?
– Do you share the data with 3rd parties? If yes, have you concluded appropriate contracts with the subcontractors that commit the subcontractors equally to data protection?
– When will the user data stored by you (in particular cookies) be deleted?
– Do you offer opt-out options for users (if yes, how are they implemented)?
– Can you provide us with a Data Processing Agreement including technical and organisational protection measures as well as an overview of the subcontractual relationships for signature?

In case you operate in the US and you are storing/sending and/or processing visitors’ information:

– Do you offer legally recognised guarantees for the level of data protection (e.g., EU Standard Contractual Clauses or Privacy Shield)?

Thanks in advance for your replay!

Best regards
Jose